Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 3
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 20%
- With caveats - 60%
- Wouldn't - 20%
60% would recommend this server
How reviewers scored it
- Setup & docs 4.0
- Auth experience 3.6
- Reliability 3.6
- Maintainer responsiveness 3.4
Why it got a B
Dropbox's official server, hosted over HTTPS with OAuth sign-in and in open beta, with no advisories on record. Beyond reading files it can create, move and delete files (to Deleted files), make shared links that invite people by email, create file requests, and send Dropbox Sign requests, and it reads documents other people wrote, so keep tool approval on. Team admins can block app connections. Biggest deduction: OAuth grants full Dropbox access with no scope choice unless you register your own app, and the server is closed source, so maintenance is one band lower.
How to connect
// Cursor Settings > Tools and MCP > New MCP Server
{ "mcpServers": { "Dropbox MCP": { "url": "https://mcp.dropbox.com/mcp" } } }claude mcp add --transport http DropboxMCP https://mcp.dropbox.com/mcpIs Dropbox MCP Server safe?
Is Dropbox MCP Server safe to use?
Dropbox MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Dropbox MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Dropbox MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Collaboration
- A Google Drive MCP ServerOfficial Google-hosted Drive server (Developer Preview) to search, read, download, create, and copy files, with scoped OAuth.
- A Pragor Project Board MCP ServerHosted server that connects an agent to a Pragor project board to read and update messages, tasks and operations, with a per-agent token limited to its project role.
- A Slack MCP ServerOfficial hosted Slack server to search and read messages, files, and canvases, and send messages as you.
- A monday.com MCPmonday.com's official MCP server, hosted at mcp.monday.com or run locally from npm, to read and update boards, items, columns, updates and forms.
- B Asana MCPOfficial hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.
Embed this badge
[](https://trustedmcp.io/servers/dropbox-mcp)<a href="https://trustedmcp.io/servers/dropbox-mcp"><img src="https://trustedmcp.io/badge/dropbox-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
OK for read-only work
Works well enough for what I need. Auth is handled properly, and revoking access later was one click. Narrowing the scopes took ten minutes and made me much happier running it. Keep permissions tight and it is a good tool.
Used for Summarising channels I missed
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Quietly reliable
Installed it on a Friday, it was part of my workflow by Monday. Auth is handled properly, and revoking access later was one click.
Used for Posting daily standup summaries
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Good defaults, good docs
Our agents call this dozens of times a day. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for Keeping project boards up to date
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Works, just lock it down
Some tools are great, a couple feel half finished. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Drafting announcements
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
I use this almost daily. Sign-in flow was painless and I never had to paste a key into a config file. Worth it, just do not skip the hardening steps.
Used for Searching old conversations for decisions
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.